ing occurs during scheduled periods 
every day of the week, the ACR soft- 
ware continuously monitors the an- 
tenna equipment. 

This work was done by Roger Y. Chao, 
Scott C. Morgan, Martha M. Strain, 


Stephen T. Rockwell, Kenneth J. Shimizu, 
Barzia ]. Tehran! , Jaclyn H. Kwok, 
M ichelleTuazon-Wong, and Henry \ /altier 
of Caltech; Reza Nalbandi of MTC; 
M ichael Wert of ITT; and Patrick Leung of 
ISDS/Averstar for NASA's Jet Propulsion 


Laboratory For more information, contact 
iaoffice@jpl.nasa.gov. 

T his software is available for commercial 
licensing. Please contact Daniel Broderick of 
the California Institute of Technology at 
danielb@caltech.edu. Refer to NPO-47002. 


$ Efficient Parallel Engineering Computing on 
Linux Workstations 

NASA's Jet Propul si on Laboratory, Pasadena, California 


A C software module has been devel- 
oped that creates lightweight processes 
(LWPs) dynamically to achieve parallel 
computing performance in a variety of 
engineering simulation and analysis ap- 
plications to support NASA and DoD 
project tasks. The required interface be- 
tween the module and the application it 
supports is simple, minimal and almost 
completely transparent to the user appli- 
cations, and it can achieve nearly ideal 
computing speed-up on multi-CPU engi- 
neering workstations of all operating sys- 
tem platforms. The module can be inte- 
grated into an existing application (C, 
C++, Fortran and others) either as part of 
a compiled module or as a dynamically 
linked library (DLL). 


This software has the following 
major advantages over existing com- 
mercial and public domain software of 
similar functionality. 

1. It is especially applicable to and pow- 
erful on commercially, widely avail- 
able, multi-CPU engineering work- 
stations; 

2. It hasa very simple software architec- 
ture and user interface and can be 
quickly integrated into an existing 
application; and 

3. Its code size isvery small, and its per- 
formance overhead is minimal, re- 
sulting in nearly ideal parallel-com- 
puting performance for many 
computing-intensive scientific and 
engineering applications. 


The approach adopted in this 
technology development does not re- 
quire any additional hardware and 
software beyond what's typically 
available on any commercial engi- 
neering workstations, that is a native 
operating system and C, C++ or 
FORTRAN compilers that an applica- 
tion needs. 

This work was done by John Z. Lou 
of Caltech for NASA's Jet Propulsion 
Laboratory. For more information, contact 
iaoffice@jpl.nasa.gov. 

The software used in this innovation is 
available for commercial licensing. Please 
contact Daniel Broderick of theCalifornia In- 
stitute of Technology at danidb@caltech.edu. 
Refer to NPO-46892. 


O FAILSAFE Health Management for Embedded Systems 

NASA'sJet Propulsion Laboratory, Pasadena, California 

The FAILSAFE project is developing 
concepts and prototype implementations 
for software health management in mis- 
sion-critical, real-time embedded systems. 

The project unites features of the indus- 
try-standard ARINC 653 Avionics Appli- 
cation Software Standard Interface and 
J PL's Mission Data System (MDS) technol- 
ogy (see figure). The ARINC 653 stan- 
dard establishes requirements for the 
services provided by partitioned, real-time 
operating systems. The MDS technology 
provides a state analysis method, canoni- 
cal architecture, and software framework 
that facilitates the design and implemen- 
tation of software-intensive complex sys- 
tems.TheMDStechnologyhasbeen used 
to provide the health management func- 
tion for an ARINC 653 application imple- 
mentation. In particular, the focus is on 
showing how this combination enables 
reasoning about, and recovering from, 
application software problems. The FAILSAFE model-based health management concept is depicted in the block diagram. 
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The application itself consists of two 
unique applications running in the 
ARINC 653 system: a target application 
and the FAILSAFE model-based health 
monitoring application. The target ap- 
plication isa high-level simulation of the 
Shuttle Abort Control System (ACS), de- 
veloped specifically for thistask. The tar- 
get application isa two-partition applica- 
tion with one partition allocated to the 
sequencing behavior, and one partition 
allocated to the application I/O. The 
health monitor application executes in 
its own partition. The three application 
partitions communicate via ARINC 653 
ports and message queues, which are 
specified in the system module.xml con- 
figuration file. Real-time system data is 
provided to the health monitor via the 
use of ARINC 653 sampling ports that al- 


lows the health monitor application to 
intercept any traffic coming across the 
ports of interest. 

This task was turned into a goal-based 
function that, when working in concert 
with the software health manager, aims 
to work around software and hardware 
problems in order to maximize abort 
performance results. In order to make it 
a compelling demonstration for current 
aerospace initiatives, the prototype has 
been additionally imposed on a number 
of requirements derived from NASA's 
Constellation Program. 

Lastly, the ARINC 653 standard im- 
poses a number of requirements on the 
system integrator for developing the req- 
uisite error handler process. Under 
ARINC 653, the health monitoring 
(HM) service is invoked by an applica- 


tion calling the application error service, 
or by the operating system or hardware 
detecting a fault. It is these HM and 
error process details that are imple- 
mented with the M DS technology, show- 
ing how a static-analytic approach is ap- 
propriate for identifying fault 
determination details, and showing how 
the framework supports acting upon 
state estimation and control features in 
order to achieve safety-related goals. 

T his work was don e by 6 regory A . H orva th, 
David A. Wagner, and H ui Ying Wen of Cal- 
tech and M atthew Barry of Kestrel Technology 
for NASA's] et Propulsion Laboratory For more 
information , contact iaoffice@jpl.nasa.gov. 

T his softwareis available for commercial li- 
censing. Please contact Daniel Broderick of 
the California Institute of Technology at 
danielb@caltech.edu. Refer to NPO-46981. 


© Water Detection Based on Sky Reflections 

NASA's Jet Propul si on Laboratory, Pasadena, California 
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Water is Detected indirectly by detecting sky and terrain reflections. 


This software has been designed to 
detect water bodies that are out in the 
open on cross-country terrain atmid-to 
far-range (approximately 20-100 me- 
ters), using imagery acquired from a 
stereo pair of color cameras mounted 
on a terrestrial, unmanned ground ve- 
hicle (UGV). Non -traversable water 
bodies, such as large puddles, ponds, 
and lakes, are indirectly detected by de- 
tecting reflections of the sky below the 
horizon in color imagery. The appear- 
ance of water bodies in color imagery 
largely depends on the ratio of light re- 
flected off the water surface to the light 
coming out of the water body. When a 
water body is far away, the angle of inci- 
dence is large, and the light reflected 
off the water surface dominates. We 
have exploited this behavior to detect 
water bodies out in the open at mid- to 
far-range. When a water body is de- 
tected at far range, a UGV's path plan- 
ner can begin to look for alternate 
routes to the goal position sooner, 
rather than later. As a result, detecting 
water hazards at far range generally re- 
duces the time required to reach a goal 
position during autonomous naviga- 
tion. This software implements a new 
water detector based on sky reflections 
that geometrically locates the exact 
pixel in the sky that is reflecting on a 
candidate water pixel on the ground, 
and predicts if the ground pixel is water 
based on color similarity and local ter- 
rain features (see figure). 


Assuming a water body can be mod- 
eled as a horizontal mirror, a ray of in- 
cident light reflected off the surface of 
a water body enters a pixel of a cam- 
era's focal plane array (FPA). Since the 
angle of incidence is equal to the angle 
of reflection (according to the law of 
reflection), a direct ray from the tail of 
the incident ray (and within the same 


vertical plane as the incident ray) will 
enter the camera's FPA at a pixel whose 
color will indicate the color of the sky 
being reflected along the reflected ray. 
Because the distance between the cam- 
era and the sky is much larger than the 
distance between the camera and can- 
didate water points at normal detection 
ranges, the direct ray and the incident 
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